(by Luca Angelucci) A new phishing campaign has recently come to light that proposes false updates of health insurance for COVID-19 coverage.
This illegal action is yet another phishing campaign that is cynically riding the wave of the Coronavirus pandemic and pretending to provide health insurance and then steal Microsoft Office login credentials.
The victims receive an email proposing the updating of their current health insurance policy which is also intended to include coverage for COVID-19 in the insured guarantees in order to arouse the safe interest on the part of the recipient who is encouraged to follow the iter indicated. By clicking on the button that allows you to complete the payment of the amount, the victims are redirected to a phishing site with subsequent subtraction and loss of the money paid.
In some cases, cyber criminals have even very likely imitated a communication from the executive director of an insurance company about new insurance plans to cover the new virus. By clicking on the button to view the information document, users were redirected to a malicious site with easily imaginable consequences.
Also in this case, the competent police offices were promptly alerted and informed that they should be wary of these and similar messages, carefully avoiding opening the attachments they contain. Unfortunately, in recent months, given the general and massive IT use due to the lockdown situation, data subtraction actions have taken place with possible subsequent fraudulent use of the same.
From a positive point of view, however, in the future prospect of resuming all the economic and social activities of the country, it should be highlighted that all the main national and foreign insurance companies are taking action to offer Cyber Crime insurance coverage that is increasingly broad and relevant to risks that the world of the web reveals with constantly increasing statistics.
Luca Angelucci, Head of the AIDR Anti-Crime Insurance Observatory